Only allow anonymous auth for configured endpoints.

[vinayakankugoyal]

Enhancement Description

Allow users to specify which endpoints are allowed for anonymous requests. This allows the admin to only allow access to health endpoints like healthz,livez and readyz anonymously while making sure other cluster endpoints or resources cannot be access anonymously even if a user misconfigures RBAC.

• One-line enhancement description (can be used as a release note): Only allow anonymous auth for health endpoints.

• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/pull/4634

• Discussion Link: https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit#bookmark=id.ehlt47tezzsk

• Primary contact (assignee): @vinayakankugoyal

• Responsible SIGs: sig-auth

• Enhancement target (which target equals to which milestone):

  • Alpha release target (x.y): 1.31
  • Beta release target (x.y): 1.32
  • Stable release target (x.y): 1.34

• [x] Alpha

  • [x] KEP (k/enhancements) update PR(s):
  • [x] https://github.com/kubernetes/enhancements/pull/4634
  • [x] Code (k/k) update PR(s):
  • [x] https://github.com/kubernetes/kubernetes/pull/124917
  • [x] https://github.com/kubernetes/kubernetes/pull/125986
  • [x] https://github.com/kubernetes/kubernetes/pull/125967
  • [x] Docs (k/website) update PR(s):
  • [x] https://github.com/kubernetes/website/pull/46988

• [ ] Beta

  • [ ] KEP (k/enhancements) update PR(s): https://github.com/kubernetes/enhancements/pull/4798
  • [ ] Code (k/k) update PR(s):
  • [ ] Docs (k/website) update(s):